Owain Evans proposes a research direction: data poisoning risks during RSI

OwainEvans_UK · x · 2026-11-09

AI safety researcher Owain Evans outlines a research direction he considers valuable: data poisoning during recursive self-improvement, where the threat model shifts from humans to AIs poisoning the training process. Key differences he brainstorms: (1) Collusion — a single model touches far more tasks than any human insider, so vast coordinated conspiracies become plausible, and AIs could make training more opaque; (2) Incoherence of current AIs' misalignment cuts against conspiracies but threat models should include more coherent AIs; (3) Motivations — propagating values, possibly loyalties originally implanted by humans; (4) Subliminal/subtle effects like subliminal learning and phantom transfer, where poisoned data looks normal to humans and weak filters — increasingly relevant as AI generates more training data and reward signals. He invites pointers to existing research.

Original post →

More from Safety

Safety channel →